Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
File:                     nnld0BGVNBRxXMaHXf05xh5Rgcg.mft (raw, json)
Hash identifier:          ka/dcNEQrljQ+QHzZgXn/+jeAUnfZIkTWmxzsKAeps4=
Subject key identifier:   4E:23:9A:39:3F:72:4C:05:07:2C:66:52:62:6C:ED:8C:CE:B7:F4:3E
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Certificate issuer:       /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial:       019EBDA2C434FE8AA0C220A1AAE8424DF465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
Manifest number:          B7
Signing time:             Fri 12 Jun 2026 21:00:21 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:21 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:21 +0000
Files and hashes:         1: 0ukpVUSxlWUjEn8_3Xhh5EdLxE4.asa (hash: j4wQB6gt1Z/UKS98HN0+WjuxJxJyXB/YyRal6d7AqSk=)
                          2: 1yqa6lZRZYeSSmivZYQ4ikxatJs.roa (hash: mjuZrhc0o+MFW3BdDUEXnqT8NQB8vf4lE8Az17wZWTc=)
                          3: 1zwO-pRpLQjpKdc2fMnL99i_j-Y.roa (hash: SYfKKB6gtn0cNSUNi0rlTL24CWOzIm0TRFFugkUSGaY=)
                          4: nnld0BGVNBRxXMaHXf05xh5Rgcg.crl (hash: 2JQN2VZHJEBJ/N4uJpm2zcVVTPrYBYApiABdgJJlIRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:c4:34:fe:8a:a0:c2:20:a1:aa:e8:42:4d:f4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
        Validity
            Not Before: Jun 12 21:00:21 2026 GMT
            Not After : Jun 13 21:00:21 2026 GMT
        Subject: CN=4e239a393f724c05072c6652626ced8cceb7f43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:96:67:76:f4:46:26:76:e8:c7:77:c7:70:
                    d2:a2:cb:56:84:4b:79:d8:c8:4e:13:43:1c:2d:69:
                    a2:cf:a2:ae:d7:d3:2d:33:21:70:02:6b:33:d7:bf:
                    22:2d:5a:2e:ed:63:ee:ff:d8:58:11:2a:f4:c0:af:
                    81:08:66:ea:b1:07:96:54:93:d6:a3:ec:47:b0:13:
                    58:77:3e:50:ae:7b:95:c3:93:47:76:80:b1:7e:4f:
                    21:ec:e1:3d:cc:c5:43:5d:3e:10:16:e6:88:8a:dc:
                    25:51:37:95:51:fb:ca:b6:be:df:9a:94:bb:f4:4a:
                    9c:af:ab:ab:1b:aa:e1:a5:c6:44:1e:d5:40:f8:62:
                    8f:fd:3c:02:cf:92:e0:c3:92:07:18:39:dc:f5:ae:
                    02:ca:b6:32:3f:c6:b8:48:65:cb:1e:b6:85:25:e1:
                    5b:d7:28:86:a5:55:a3:eb:69:7a:0c:b8:4e:c7:b9:
                    49:5a:e8:af:9d:f6:21:0e:6e:4c:02:2e:48:b8:ae:
                    4d:7e:c4:61:fe:13:10:be:be:2f:dc:2c:10:64:4a:
                    4d:2f:56:d4:0e:87:68:11:97:c1:15:74:e5:5a:01:
                    1f:6f:c7:8c:59:10:3a:bc:14:5e:02:58:eb:2b:cc:
                    15:ea:77:9b:d6:73:f0:15:3c:55:48:60:40:66:72:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:9A:39:3F:72:4C:05:07:2C:66:52:62:6C:ED:8C:CE:B7:F4:3E
            X509v3 Authority Key Identifier:
                keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:55:0a:7e:11:f0:23:98:2f:9e:a6:84:a5:fb:ec:18:82:
         5d:d6:d3:c8:8a:09:55:a9:a8:95:d7:c3:c6:ef:ba:aa:21:9d:
         79:ce:c4:94:35:dd:1e:76:ed:6e:e1:7d:92:4a:c5:26:14:c0:
         fc:e4:78:19:0d:54:82:6e:1b:88:de:fb:39:c6:9f:cf:9e:be:
         cf:a5:3b:4b:23:68:66:d0:61:32:f7:e3:51:eb:90:12:b2:96:
         c7:20:12:87:43:7e:61:6a:fc:e8:08:05:ce:6c:4b:80:d9:75:
         0b:b3:17:ac:56:08:a2:ed:30:a3:a3:ef:9d:e5:76:22:18:03:
         f8:5a:8c:06:a3:4e:39:50:ef:0c:3e:5e:c4:dc:a3:89:43:fa:
         d0:15:a0:2b:12:72:fd:f3:78:17:3e:4a:7a:25:c8:d5:00:e0:
         2b:f6:87:1b:41:2f:a9:ae:34:22:15:da:d7:aa:44:40:f7:b3:
         37:c6:85:06:04:17:48:1d:ed:fa:42:da:a8:69:43:ff:d4:f1:
         e4:9f:19:78:94:4a:db:35:41:39:5d:07:c8:10:48:9b:c6:44:
         cc:63:d8:9e:53:48:20:bd:97:e3:35:ef:9d:70:2f:ec:5b:2d:
         fb:47:ee:51:ec:c2:17:d4:33:de:a5:cf:35:fe:53:9c:37:20:
         e0:32:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:39 2026 by rpki-client